pacnog December 2009

pacnog@pacnog.org

4 participants
5 discussions

by noreply＠apnic.net

Dear Subscriber, This is the monthly reminder of subscription information for the pacnog list, hosted at APNIC. For subscription information including how to un-subscribe go to http://mailman.apnic.net/mailman/listinfo/pacnog Thank you for participating in this discussion. Kind Regards, List administrator

12 years, 6 months

AusCERT Week in Review - Week Ending 24/12/2009 (AUSCERT#20073f686)

by Paul Fahey

AusCERT Week in Review 24 December 2009 Alerts, Advisories and Updates: ------------------------------- Title: ASB-2009.1170 - [UNIX/Linux] XFS acl: Increased privileges - Existing account Date: 24 December 2009 URL: http://www.auscert.org.au/12169 Title: ASB-2009.1168 - [Win][Linux][Solaris] Hitachi Storage Command Suite: Access privileged data - Remote with user interaction Date: 23 December 2009 URL: http://www.auscert.org.au/12160 Title: ASB-2009.1169 - [Win][UNIX/Linux] Intel Trusted Execution Technology: Increased privileges - Remote with user interaction Date: 23 December 2009 URL: http://www.auscert.org.au/12161 Title: ASB-2009.1163.3 - UPDATE [Win][UNIX/Linux] Horde Application Framework, Horde Groupware, Horde Groupware Webmail Edition: Cross-site scripting - Remote with user interaction Date: 22 December 2009 URL: http://www.auscert.org.au/12139 Title: ASB-2009.1165.3 - UPDATE [Win][UNIX/Linux] Wireshark prior to 1.2.5: Denial of service - Remote/unauthenticated Date: 22 December 2009 URL: http://www.auscert.org.au/12148 Title: ASB-2009.1167.3 - UPDATE [Appliance] Open Source SIM prior to version 2.1.5-4: Multiple vulnerabilities Date: 22 December 2009 URL: http://www.auscert.org.au/12151 Title: ASB-2009.1164.2 - UPDATE [Win][Linux][HP-UX][Solaris][AIX] IBM ClearQuest prior to 7.1.1.: Access privileged data - Remote with user interaction Date: 21 December 2009 URL: http://www.auscert.org.au/12141 Title: ASB-2009.1166 - [Win][Netware][Linux][Solaris][AIX] Novell eDirectory 8.8 SP5 prior to Patch2: Cross-site scripting - Remote with user interaction Date: 21 December 2009 URL: http://www.auscert.org.au/12150 External Security Bulletins: ---------------------------- Title: ESB-2009.1680 - [Win][UNIX/Linux] FAQ (Drupal third-party module): Cross-site scripting - Existing account Date: 24 December 2009 OS: IRIX, HP Tru64 UNIX, Solaris, Windows 2003, Red Hat Linux, Windows 7, Mac OS X, Ubuntu, Debian GNU/Linux, Windows XP, HP-UX, Other BSD Variants, SUSE, Windows 2000, OpenBSD, AIX, Windows Vista, FreeBSD, Windows Server 2008, Other Linux Variants URL: http://www.auscert.org.au/12168 Title: ESB-2009.1679 - [RedHat] java-1.6.0-ibm: Multiple vulnerabilities Date: 24 December 2009 OS: Red Hat Linux URL: http://www.auscert.org.au/12167 Title: ESB-2009.1678 - [RedHat] rhev-hypervisor: Denial of service - Existing account Date: 24 December 2009 OS: Red Hat Linux URL: http://www.auscert.org.au/12166 Title: ESB-2009.1677 - [Win][UNIX/Linux][Debian] unbound: Reduced security - Remote/unauthenticated Date: 24 December 2009 OS: IRIX, HP Tru64 UNIX, Solaris, Windows 2003, Red Hat Linux, Windows 7, Mac OS X, Debian GNU/Linux, Ubuntu, Windows XP, HP-UX, Other BSD Variants, SUSE, Windows 2000, OpenBSD, AIX, Windows Vista, FreeBSD, Windows Server 2008, Other Linux Variants URL: http://www.auscert.org.au/12165 Title: ESB-2009.1676 - [Debian] kvm: Denial of service - Existing account Date: 24 December 2009 OS: Debian GNU/Linux URL: http://www.auscert.org.au/12163 Title: ESB-2009.1675 - [Debian] bind9: Provide misleading information - Remote/unauthenticated Date: 24 December 2009 OS: Debian GNU/Linux URL: http://www.auscert.org.au/12162 Title: ESB-2009.1674 - [UNIX/Linux][Mandriva] proftpd: Unauthorised access - Remote/unauthenticated Date: 23 December 2009 OS: IRIX, HP Tru64 UNIX, Solaris, Red Hat Linux, Mac OS X, Ubuntu, Debian GNU/Linux, HP-UX, Other BSD Variants, SUSE, OpenBSD, AIX, FreeBSD, Other Linux Variants URL: http://www.auscert.org.au/12159 Title: ESB-2009.1673 - [SUSE] kernel: Multiple vulnerabilities Date: 23 December 2009 OS: SUSE URL: http://www.auscert.org.au/12158 Title: ESB-2009.1672 - [SUSE][OpenSUSE] flash-player: Execute arbitrary code/commands - Remote with user interaction Date: 23 December 2009 OS: Other Linux Variants, SUSE URL: http://www.auscert.org.au/12157 Title: ESB-2009.1671 - [SUSE][OpenSUSE] Mozilla Firefox: Multiple vulnerabilities Date: 23 December 2009 OS: Other Linux Variants, SUSE URL: http://www.auscert.org.au/12156 Title: ESB-2009.1670 - [HP-UX] Apache: Modify arbitrary files - Remote with user interaction Date: 23 December 2009 OS: HP-UX URL: http://www.auscert.org.au/12155 Title: ESB-2009.1669 - [UNIX/Linux][RedHat] condor: Unauthorised access - Existing account Date: 22 December 2009 OS: IRIX, HP Tru64 UNIX, Solaris, Red Hat Linux, Mac OS X, Ubuntu, Debian GNU/Linux, HP-UX, Other BSD Variants, SUSE, OpenBSD, AIX, FreeBSD, Other Linux Variants URL: http://www.auscert.org.au/12154 Title: ESB-2009.1668 - [UNIX/Linux][Mandriva] koffice: Multiple vulnerabilities Date: 22 December 2009 OS: IRIX, HP Tru64 UNIX, Solaris, Red Hat Linux, Mac OS X, Ubuntu, Debian GNU/Linux, HP-UX, Other BSD Variants, SUSE, OpenBSD, AIX, FreeBSD, Other Linux Variants URL: http://www.auscert.org.au/12153 Title: ESB-2009.1667 - [Win][Linux][HP-UX][AIX] IBM SDK for Java: Unauthorised access - Remote/unauthenticated Date: 22 December 2009 OS: Red Hat Linux, Windows 2003, Windows 7, Debian GNU/Linux, Ubuntu, Windows XP, HP-UX, SUSE, Windows 2000, AIX, Windows Vista, Windows Server 2008, Other Linux Variants URL: http://www.auscert.org.au/12152 Title: ESB-2009.1666 - [Win][UNIX/Linux] gtk2: Denial of service - Existing account Date: 21 December 2009 OS: IRIX, HP Tru64 UNIX, Solaris, Red Hat Linux, Windows 2003, Windows 7, Mac OS X, Ubuntu, Debian GNU/Linux, HP-UX, Windows XP, Other BSD Variants, SUSE, OpenBSD, Windows 2000, AIX, FreeBSD, Windows Vista, Other Linux Variants, Windows Server 2008 URL: http://www.auscert.org.au/12149 Title: ESB-2009.1665 - [Win][UNIX/Linux] Adobe Flash Media Server 3.5.2 and prior: Execute arbitrary code/commands - Remote with user interaction Date: 21 December 2009 OS: IRIX, HP Tru64 UNIX, Solaris, Windows 2003, Red Hat Linux, Windows 7, Mac OS X, Ubuntu, Debian GNU/Linux, Windows XP, HP-UX, Other BSD Variants, SUSE, Windows 2000, OpenBSD, AIX, Windows Vista, FreeBSD, Windows Server 2008, Other Linux Variants URL: http://www.auscert.org.au/12147 Title: ESB-2009.1664 - [UNIX/Linux][Debian] acpid: Access privileged data - Remote with user interaction Date: 21 December 2009 OS: IRIX, HP Tru64 UNIX, Solaris, Red Hat Linux, Mac OS X, Debian GNU/Linux, Ubuntu, HP-UX, Other BSD Variants, SUSE, OpenBSD, AIX, FreeBSD, Other Linux Variants URL: http://www.auscert.org.au/12146 Title: ESB-2009.1663 - [UNIX/Linux][Debian] ganeti: Execute arbitrary code/commands - Existing account Date: 21 December 2009 OS: IRIX, HP Tru64 UNIX, Solaris, Red Hat Linux, Mac OS X, Debian GNU/Linux, Ubuntu, HP-UX, Other BSD Variants, SUSE, OpenBSD, AIX, FreeBSD, Other Linux Variants URL: http://www.auscert.org.au/12145 Title: ESB-2009.1662 - [Win] Citrix: Denial of service - Remote with user interaction Date: 18 December 2009 OS: Windows 2003, Windows XP, Virtualisation, Windows 2000, Windows 7, Windows Vista, Windows Server 2008 URL: http://www.auscert.org.au/12142 Title: ESB-2009.1661 - [UNIX/Linux][Mandriva] ffmpeg: Denial of service - Remote with user interaction Date: 18 December 2009 OS: IRIX, HP Tru64 UNIX, Solaris, Red Hat Linux, Mac OS X, Ubuntu, Debian GNU/Linux, HP-UX, Other BSD Variants, SUSE, OpenBSD, AIX, FreeBSD, Other Linux Variants URL: http://www.auscert.org.au/12140 Title: ESB-2009.1656.2 - UPDATE [Win][UNIX/Linux] Drupal: Cross-site scripting - Existing account Date: 22 December 2009 OS: Windows Server 2008, Other Linux Variants, Windows Vista, FreeBSD, AIX, OpenBSD, Windows 2000, SUSE, Other BSD Variants, HP-UX, Windows XP, Ubuntu, Debian GNU/Linux, Mac OS X, Windows 7, Red Hat Linux, Windows 2003, Solaris, HP Tru64 UNIX, IRIX URL: http://www.auscert.org.au/12131 Title: ESB-2009.1593.2 - UPDATE [FreeBSD] freebsd-update: Read-only data access - Existing account Date: 21 December 2009 OS: FreeBSD URL: http://www.auscert.org.au/12053 Title: ESB-2009.1391.3 - UPDATE [Solaris][OpenSolaris] Thunderbird: Multiple vulnerabilities Date: 18 December 2009 OS: Solaris URL: http://www.auscert.org.au/11778 =========================================================================== Australian Computer Emergency Response Team The University of Queensland Brisbane Qld 4072 Internet Email: auscert(a)auscert.org.au Facsimile: (07) 3365 7031 Telephone: (07) 3365 4417 (International: +61 7 3365 4417) AusCERT personnel answer during Queensland business hours which are GMT+10:00 (AEST). On call after hours for member emergencies only. ===========================================================================

12 years, 6 months

AusCERT Week in Review - Week Ending 11/12/2009 (AUSCERT#20073f686)

by Daniel McNamara

AusCERT Week in Review 11 December 2009 AusCERT in the Media: --------------------- Papers, Articles and other documents: ------------------------------------- Title: Adobe releases Update for Flash Player Date: 08 December 2009 URL: http://www.auscert.org.au/12080 Title: Microsoft Patches for December Date: 08 December 2009 URL: http://www.auscert.org.au/12081 Web Log Entries: ---------------- Title: Governments are tackling malware head on Date: 10 December 2009 URL: http://www.auscert.org.au/12101 Alerts, Advisories and Updates: ------------------------------- Title: ASB-2009.1156 - [Win][Linux][HP-UX][Solaris][AIX] IBM HTTP Server: Unauthorised access - Remote/unauthenticated Date: 09 December 2009 URL: http://www.auscert.org.au/12086 Title: ASB-2009.1157 - [Win][Linux][Solaris][HP Tru64][AIX] InfoSphere Information Server 8.1: Cross-site scripting - Remote with user interaction Date: 09 December 2009 URL: http://www.auscert.org.au/12087 Title: ASB-2009.1155 - ALERT [Win][UNIX/Linux] Adobe Flash Player: Execute arbitrary code/commands - Remote with user interaction Date: 08 December 2009 URL: http://www.auscert.org.au/12079 Title: ASB-2009.1153.2 - UPDATE [Win] Microsoft Bulletin Notification - December Pre-release Announcement Date: 08 December 2009 URL: http://www.auscert.org.au/12066 Title: ASB-2009.1154 - [Win][UNIX/Linux] ruby: Execute arbitrary code/commands - Remote with user interaction Date: 08 December 2009 URL: http://www.auscert.org.au/12067 External Security Bulletins: ---------------------------- Title: ESB-2009.1631 - [RedHat][Solaris][SUSE] Sun Ray Server Software: Read-only data access - Remote/unauthenticated Date: 11 December 2009 OS: Solaris, Red Hat Linux, SUSE URL: http://www.auscert.org.au/12100 Title: ESB-2009.1630 - [RedHat][Solaris][SUSE] Sun Ray Server Software: Execute arbitrary code/commands - Remote/unauthenticated Date: 11 December 2009 OS: Solaris, Red Hat Linux, SUSE URL: http://www.auscert.org.au/12099 Title: ESB-2009.1629 - [Win][Linux][HP-UX][Solaris][AIX] CA Service Desk: Cross-site scripting - Remote with user interaction Date: 11 December 2009 OS: Solaris, Windows 2003, Red Hat Linux, Windows 7, Ubuntu, Debian GNU/Linux, HP-UX, Windows XP, SUSE, Windows 2000, AIX, Windows Vista, Other Linux Variants, Windows Server 2008 URL: http://www.auscert.org.au/12098 Title: ESB-2009.1628 - [Linux][Ubuntu] linux-image-2.6.31-16-386: Multiple vulnerabilities Date: 11 December 2009 OS: Red Hat Linux, Other Linux Variants, SUSE, Ubuntu, Debian GNU/Linux URL: http://www.auscert.org.au/12097 Title: ESB-2009.1627 - ALERT [Win][RedHat][HP-UX][Solaris] HP OpenView Network Node Manager: Execute arbitrary code/commands - Remote/unauthenticated Date: 10 December 2009 OS: Solaris, Windows 2003, Red Hat Linux, Windows XP, HP-UX, Windows 2000, Windows 7, Windows Vista, Windows Server 2008 URL: http://www.auscert.org.au/12095 Title: ESB-2009.1626 - ALERT [Win][RedHat][HP-UX][Solaris] Hewlett-Packard Application Recovery Manager: Execute arbitrary code/commands - Remote/unauthenticated Date: 10 December 2009 OS: Solaris, Windows 2003, Red Hat Linux, Windows XP, HP-UX, Windows 2000 URL: http://www.auscert.org.au/12094 Title: ESB-2009.1625 - [HP-UX] VRTSweb: Execute arbitrary code/commands - Remote/unauthenticated Date: 10 December 2009 OS: HP-UX URL: http://www.auscert.org.au/12093 Title: ESB-2009.1624 - ALERT [Win][Linux][RedHat][HP-UX][Solaris][AIX] Symantec Multiple Products: Execute arbitrary code/commands - Remote/unauthenticated Date: 10 December 2009 OS: Solaris, Windows 2003, Red Hat Linux, Debian GNU/Linux, Ubuntu, HP-UX, SUSE, Windows 2000, AIX, Other Linux Variants URL: http://www.auscert.org.au/12092 Title: ESB-2009.1623 - [Linux][Ubuntu] grub2: Unauthorised access - Console/physical Date: 10 December 2009 OS: Red Hat Linux, Other Linux Variants, SUSE, Ubuntu, Debian GNU/Linux URL: http://www.auscert.org.au/12091 Title: ESB-2009.1622 - [RedHat] JBoss Enterprise Application Platform: Multiple vulnerabilities Date: 10 December 2009 OS: Red Hat Linux URL: http://www.auscert.org.au/12090 Title: ESB-2009.1621 - [Linux][RedHat] kvm: Denial of service - Existing account Date: 10 December 2009 OS: Red Hat Linux, Other Linux Variants, SUSE, Ubuntu, Debian GNU/Linux URL: http://www.auscert.org.au/12089 Title: ESB-2009.1620 - [RedHat] flash-plugin: Multiple vulnerabilities Date: 10 December 2009 OS: Red Hat Linux URL: http://www.auscert.org.au/12088 Title: ESB-2009.1619 - [HP-UX] sendmail: Denial of service - Remote/unauthenticated Date: 09 December 2009 OS: HP-UX URL: http://www.auscert.org.au/12085 Title: ESB-2009.1618 - [UNIX/Linux][RedHat] libtool: Execute arbitrary code/commands - Existing account Date: 09 December 2009 OS: IRIX, HP Tru64 UNIX, Solaris, Red Hat Linux, Mac OS X, Ubuntu, Debian GNU/Linux, HP-UX, Other BSD Variants, SUSE, OpenBSD, AIX, FreeBSD, Other Linux Variants URL: http://www.auscert.org.au/12084 Title: ESB-2009.1617 - [Win] Indeo Codec: Execute arbitrary code/commands - Remote with user interaction Date: 09 December 2009 OS: Windows 2003, Windows XP, Windows 2000 URL: http://www.auscert.org.au/12083 Title: ESB-2009.1616 - [Win][RedHat][AIX][SUSE] java-1.5.0-ibm: Multiple vulnerabilities Date: 09 December 2009 OS: Red Hat Linux, Windows 2003, Windows 7, Windows XP, SUSE, Windows 2000, AIX, Windows Vista, Windows Server 2008 URL: http://www.auscert.org.au/12082 Title: ESB-2009.1615 - ALERT [Win] Microsoft Project: Execute arbitrary code/commands - Remote with user interaction Date: 09 December 2009 OS: Windows 2003, Windows XP, Windows 2000, Windows 7, Windows Vista, Windows Server 2008 URL: http://www.auscert.org.au/12078 Title: ESB-2009.1614 - [RedHat] ntp and ntpq: Multiple vulnerabilities Date: 09 December 2009 OS: Red Hat Linux URL: http://www.auscert.org.au/12077 Title: ESB-2009.1613 - [UNIX/Linux][Debian] ntp: Denial of service - Remote/unauthenticated Date: 09 December 2009 OS: IRIX, HP Tru64 UNIX, Solaris, Red Hat Linux, Mac OS X, Debian GNU/Linux, Ubuntu, HP-UX, Other BSD Variants, SUSE, OpenBSD, AIX, FreeBSD, Other Linux Variants URL: http://www.auscert.org.au/12075 Title: ESB-2009.1612 - [Win] WordPad and Office Text Converters: Execute arbitrary code/commands - Remote with user interaction Date: 09 December 2009 OS: Windows 2003, Windows XP, Windows 2000, Windows 7, Windows Vista, Windows Server 2008 URL: http://www.auscert.org.au/12076 Title: ESB-2009.1611 - ALERT [Win] Internet Explorer: Execute arbitrary code/commands - Remote with user interaction Date: 08 December 2009 OS: Windows 7, Windows Server 2008, Windows 2003, Windows 2000, Windows XP URL: http://www.auscert.org.au/12074 Title: ESB-2009.1610 - ALERT [Win] Internet Authentication Service: Multiple vulnerabilities Date: 09 December 2009 OS: Windows XP, Windows 2000, Windows Vista, Windows Server 2008 URL: http://www.auscert.org.au/12073 Title: ESB-2009.1609 - [Win] Active Directory Federation Services (ADFS): Multiple vulnerabilities Date: 09 December 2009 OS: Windows 2003, Windows Server 2008 URL: http://www.auscert.org.au/12072 Title: ESB-2009.1608 - [Win] Local Security Authority Subsystem Service (LSASS): Denial of service - Existing account Date: 09 December 2009 OS: Windows 2003, Windows XP, Windows 2000 URL: http://www.auscert.org.au/12071 Title: ESB-2009.1607 - [Win][RedHat][HP-UX][Solaris] HP OpenView Data Protector Application Recovery Manager: Denial of service - Remote/unauthenticated Date: 08 December 2009 OS: Solaris, Windows 2003, Red Hat Linux, HP-UX, Windows XP, Windows 2000 URL: http://www.auscert.org.au/12070 Title: ESB-2009.1606 - [Debian] shibboleth: Cross-site scripting - Remote/unauthenticated Date: 08 December 2009 OS: Debian GNU/Linux URL: http://www.auscert.org.au/12069 Title: ESB-2009.1605 - [RedHat] java-1.4.2-ibm: Multiple vulnerabilities Date: 08 December 2009 OS: Red Hat Linux URL: http://www.auscert.org.au/12068 Title: ESB-2009.1604 - [UNIX/Linux][RedHat] expat: Denial of service - Remote with user interaction Date: 08 December 2009 OS: IRIX, HP Tru64 UNIX, Solaris, Red Hat Linux, Mac OS X, Ubuntu, Debian GNU/Linux, HP-UX, Other BSD Variants, SUSE, OpenBSD, AIX, FreeBSD, Other Linux Variants URL: http://www.auscert.org.au/12065 Title: ESB-2009.1603 - [RedHat] acpid: Increased privileges - Existing account Date: 08 December 2009 OS: Red Hat Linux URL: http://www.auscert.org.au/12064 Title: ESB-2009.1602 - [OpenSolaris] python: Multiple vulnerabilities Date: 07 December 2009 OS: Solaris URL: http://www.auscert.org.au/12063 Title: ESB-2009.1601 - [OpenSolaris] IP Kernel Module: Denial of service - Remote/unauthenticated Date: 07 December 2009 OS: Solaris URL: http://www.auscert.org.au/12062 Title: ESB-2009.1600 - [UNIX/Linux][Debian] belpic: Unauthorised access - Remote/unauthenticated Date: 07 December 2009 OS: IRIX, HP Tru64 UNIX, Solaris, Red Hat Linux, Mac OS X, Debian GNU/Linux, Ubuntu, HP-UX, Other BSD Variants, SUSE, OpenBSD, AIX, FreeBSD, Other Linux Variants URL: http://www.auscert.org.au/12061 =========================================================================== Australian Computer Emergency Response Team The University of Queensland Brisbane Qld 4072 Internet Email: auscert(a)auscert.org.au Facsimile: (07) 3365 7031 Telephone: (07) 3365 4417 (International: +61 7 3365 4417) AusCERT personnel answer during Queensland business hours which are GMT+10:00 (AEST). On call after hours for member emergencies only. ===========================================================================

12 years, 6 months

AusCERT Week in Review - Week Ending 4/12/2009 (AUSCERT#20073f686)

by Daniel McNamara

AusCERT Week in Review 04 December 2009 AusCERT in the Media: --------------------- Papers, Articles and other documents: ------------------------------------- Title: Australian Paliament House of Representatives' cybercrime enquiry Date: 29 November 2009 URL: http://www.auscert.org.au/12024 Title: Senate Select Committee enquiry into the National Broadband Network Date: 29 November 2009 URL: http://www.auscert.org.au/12025 Web Log Entries: ---------------- Title: Clientless SSL VPN products break web browser domain-based security models Date: 02 December 2009 URL: http://www.auscert.org.au/12043 Alerts, Advisories and Updates: ------------------------------- Title: ASB-2009.1152 - [Win][Linux][HP-UX][Solaris][AIX] IBM DB2: Execute arbitrary code/commands - Existing account Date: 03 December 2009 URL: http://www.auscert.org.au/12045 Title: ASB-2009.1148 - ALERT [FreeBSD] FreeBSD: Root compromise - Existing account Date: 02 December 2009 URL: http://www.auscert.org.au/12033 Title: ASB-2009.1149 - [Win][Netware][Linux][Solaris][AIX] Novell eDirectory: Execute arbitrary code/commands - Remote/unauthenticated Date: 02 December 2009 URL: http://www.auscert.org.au/12035 Title: ASB-2009.1150 - [Appliance] BIG-IP: Unauthorised access - Remote/unauthenticated Date: 02 December 2009 URL: http://www.auscert.org.au/12036 Title: ASB-2009.1151 - [Win] BlackBerry Enterprise Server: Execute arbitrary code/commands - Remote with user interaction Date: 02 December 2009 URL: http://www.auscert.org.au/12037 Title: ASB-2009.1147 - [Win][UNIX/Linux] Ruby on Rails: Cross-site scripting - Remote with user interaction Date: 01 December 2009 URL: http://www.auscert.org.au/12032 Title: ASB-2009.1146 - [Win][UNIX/Linux] DotNetNuke: Cross-site scripting - Remote/unauthenticated Date: 30 November 2009 URL: http://www.auscert.org.au/12023 External Security Bulletins: ---------------------------- Title: ESB-2009.1599 - [UNIX/Linux][Mandriva] zsh: Denial of service - Existing account Date: 04 December 2009 OS: IRIX, HP Tru64 UNIX, Solaris, Red Hat Linux, Mac OS X, Ubuntu, Debian GNU/Linux, HP-UX, Other BSD Variants, SUSE, OpenBSD, AIX, FreeBSD, Other Linux Variants URL: http://www.auscert.org.au/12059 Title: ESB-2009.1598 - [Linux][Ubuntu] qemu-kvm: Denial of service - Remote/unauthenticated Date: 04 December 2009 OS: Red Hat Linux, Other Linux Variants, SUSE, Ubuntu, Debian GNU/Linux URL: http://www.auscert.org.au/12058 Title: ESB-2009.1597 - [Solaris] libexpat: Denial of service - Remote with user interaction Date: 04 December 2009 OS: Solaris URL: http://www.auscert.org.au/12057 Title: ESB-2009.1596 - [Solaris][OpenSolaris] wget: Unauthorised access - Remote with user interaction Date: 04 December 2009 OS: Solaris URL: http://www.auscert.org.au/12056 Title: ESB-2009.1595 - [Solaris][OpenSolaris] gtar: Multiple vulnerabilities Date: 04 December 2009 OS: Solaris URL: http://www.auscert.org.au/12055 Title: ESB-2009.1594 - [Solaris] libxml2: Multiple vulnerabilities Date: 04 December 2009 OS: Solaris URL: http://www.auscert.org.au/12054 Title: ESB-2009.1593 - [FreeBSD] freebsd-update: Read-only data access - Existing account Date: 04 December 2009 OS: FreeBSD URL: http://www.auscert.org.au/12053 Title: ESB-2009.1592 - [FreeBSD] rtld: Root compromise - Existing account Date: 04 December 2009 OS: FreeBSD URL: http://www.auscert.org.au/12052 Title: ESB-2009.1591 - [FreeBSD] ssl: Unauthorised access - Remote with user interaction Date: 04 December 2009 OS: FreeBSD URL: http://www.auscert.org.au/12051 Title: ESB-2009.1590 - [UNIX/Linux][Debian] gforge: Denial of service - Existing account Date: 04 December 2009 OS: IRIX, HP Tru64 UNIX, Solaris, Red Hat Linux, Mac OS X, Debian GNU/Linux, Ubuntu, HP-UX, Other BSD Variants, SUSE, OpenBSD, AIX, FreeBSD, Other Linux Variants URL: http://www.auscert.org.au/12050 Title: ESB-2009.1589 - [Win][UNIX/Linux][Debian] Request Tracker 3 (RT3): Unauthorised access - Remote with user interaction Date: 04 December 2009 OS: IRIX, HP Tru64 UNIX, Solaris, Red Hat Linux, Windows 2003, Windows 7, Mac OS X, Debian GNU/Linux, Ubuntu, HP-UX, Windows XP, Other BSD Variants, SUSE, OpenBSD, Windows 2000, AIX, FreeBSD, Windows Vista, Other Linux Variants, Windows Server 2008 URL: http://www.auscert.org.au/12049 Title: ESB-2009.1588 - [RedHat] kernel-rt: Multiple vulnerabilities Date: 04 December 2009 OS: Red Hat Linux URL: http://www.auscert.org.au/12048 Title: ESB-2009.1587 - [Mac][OSX] Java: Multiple vulnerabilities Date: 04 December 2009 OS: Mac OS X URL: http://www.auscert.org.au/12047 Title: ESB-2009.1586 - [Solaris][OpenSolaris] apache2: Multiple vulnerabilities Date: 03 December 2009 OS: Solaris URL: http://www.auscert.org.au/12046 Title: ESB-2009.1585 - [Debian] openldap: Provide misleading information - Remote/unauthenticated Date: 03 December 2009 OS: Debian GNU/Linux URL: http://www.auscert.org.au/12044 Title: ESB-2009.1584 - [Win][RedHat][HP-UX][Solaris][OpenSolaris] sun-nss: Unauthorised access - Remote/unauthenticated Date: 03 December 2009 OS: Solaris, Red Hat Linux, Windows 2003, HP-UX, Windows XP, Windows 2000, Windows 7, Windows Vista, Windows Server 2008 URL: http://www.auscert.org.au/12042 Title: ESB-2009.1583 - [Linux][Solaris] Sun Java System Portal Server: Execute arbitrary code/commands - Remote with user interaction Date: 03 December 2009 OS: Solaris, Red Hat Linux, SUSE, Other Linux Variants, Ubuntu, Debian GNU/Linux URL: http://www.auscert.org.au/12041 Title: ESB-2009.1582 - [UNIX] NonStop Kernel: Execute arbitrary code/commands - Existing account Date: 03 December 2009 OS: IRIX, HP Tru64 UNIX, Solaris, HP-UX, Other BSD Variants, OpenBSD, AIX, FreeBSD URL: http://www.auscert.org.au/12040 Title: ESB-2009.1581 - [SUSE][OpenSUSE] kernel: Multiple vulnerabilities Date: 03 December 2009 OS: Other Linux Variants, SUSE URL: http://www.auscert.org.au/12039 Title: ESB-2009.1580 - [SUSE][OpenSUSE] bind: Provide misleading information - Remote/unauthenticated Date: 03 December 2009 OS: Other Linux Variants, SUSE URL: http://www.auscert.org.au/12038 Title: ESB-2009.1579 - [UNIX/Linux] Asterisk: Denial of service - Remote/unauthenticated Date: 02 December 2009 OS: IRIX, HP Tru64 UNIX, Solaris, Red Hat Linux, Mac OS X, Ubuntu, Debian GNU/Linux, HP-UX, Other BSD Variants, SUSE, OpenBSD, AIX, FreeBSD, Other Linux Variants URL: http://www.auscert.org.au/12034 Title: ESB-2009.1578 - [HP-UX] OpenSSL: Denial of service - Remote/unauthenticated Date: 01 December 2009 OS: HP-UX URL: http://www.auscert.org.au/12031 Title: ESB-2009.1577 - [RedHat] bind: Provide misleading information - Remote/unauthenticated Date: 01 December 2009 OS: Red Hat Linux URL: http://www.auscert.org.au/12030 Title: ESB-2009.1576 - [UNIX/Linux][RedHat] dstat: Execute arbitrary code/commands - Remote with user interaction Date: 01 December 2009 OS: IRIX, HP Tru64 UNIX, Solaris, Red Hat Linux, Mac OS X, Ubuntu, Debian GNU/Linux, HP-UX, Other BSD Variants, SUSE, OpenBSD, AIX, FreeBSD, Other Linux Variants URL: http://www.auscert.org.au/12029 Title: ESB-2009.1575 - [RedHat] mod_jk: Unauthorised access - Existing account Date: 01 December 2009 OS: Red Hat Linux URL: http://www.auscert.org.au/12028 Title: ESB-2009.1574 - [RedHat] tomcat: Multiple vulnerabilities Date: 01 December 2009 OS: Red Hat Linux URL: http://www.auscert.org.au/12027 Title: ESB-2009.1573 - [RedHat] xerces-j2: Denial of service - Remote with user interaction Date: 01 December 2009 OS: Red Hat Linux URL: http://www.auscert.org.au/12026 Title: ESB-2009.1572 - [Debian] wireshark: Multiple vulnerabilities Date: 30 November 2009 OS: Debian GNU/Linux URL: http://www.auscert.org.au/12022 =========================================================================== Australian Computer Emergency Response Team The University of Queensland Brisbane Qld 4072 Internet Email: auscert(a)auscert.org.au Facsimile: (07) 3365 7031 Telephone: (07) 3365 4417 (International: +61 7 3365 4417) AusCERT personnel answer during Queensland business hours which are GMT+10:00 (AEST). On call after hours for member emergencies only. ===========================================================================

12 years, 7 months

Fiji Times article: Cyber crime danger

by Robert Lowe

Greetings, I thought this article might be of interest to the people on this list: Cyber crime danger Monday, November 30, 2009 http://www.fijitimes.com/story.aspx?id=134569 In the story it states that "The Police Force has forecast cyber crimes to increase by 40 to 50 per cent from 2010 to 2012." Are these forecasts based on a study or other research? If so, I'd appreciate a pointer to source, please. Regards, Rob. -- Robert Lowe, Information Security Analyst, AusCERT P: +61 7 3346 4535 W: http://auscert.org.au

12 years, 7 months

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

pacnog December 2009